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Abstract 

For a cyclic group (a), define the atom of a as the set of all elements generating 
(a). Given any two elements a, b of a finite cyclic group G, we study the sumset of 
the atom of a and the atom of b. It is known that such a sumset is a disjoint union of 
. atoms. The goal of this paper is to offer a deeper understanding of this phenomenon, 

by determining which atoms make up the sum of two given atoms and by computing 
the exact number of representations of each element of the sumset. 
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X: 

- C ^- 1 Introduction 

When adding multiplicative objects, as for instance primes (cf. Goldbach's conjecture) or 
units in a ring, one usually is rather sceptical to find a lot of algebraic structure. Let 
Z n := Z/nZ denote the ring of residue classes modn and Z* its group of units, i.e. the 
multiplicative group of primitive residues a mod n with (a, n) — 1. Now consider the sumset 
Z* + Z* , where generally A + B := {a + b : a G A, b G B} for any two non-empty sets A 
and B such that the addition makes sense. 



* Corresponding author 



1 



In the following, let (x, y) denote the greatest common divisor of x and y, let tp denote 
Euler's totient function, and let P> 3 be the set of odd primes. In 2000 Deaconescu [I] 
derived from earlier work together with Du [5] on the number of similar automorphisms in 
finite cyclic groups a formula for 

iV n (c):=#{(x,y)G(Z;) 2 : x + y = c mod n}, (1) 

for arbitrary c G Z ra . It follows from this formula that N n (c) > for all n and c except 
for the case where n is even and c is odd, which obviously has to be excluded. Hence 
Z* + Z* = Z n for all odd n. This may not seem too surprising, but rather as a probabilistic 
than an algebraic phenomenon due to the fact that #Z* = (p(n) is large compared with 
jfL n = n. The same view is taken by most mathematicians with regard to Goldbach's 
conjecture, reading P> 3 + P> 3 = {2n : n > 3} in our context. 

However, in 2009 the first author [8] of the present article gave a proof for an extension of 
(fIT) by using multiplicativity of N n (c) with respect to n. The reader might share the astonish- 
ment called forth by observing such a strong structural feature when adding multiplicative 
objects like units in a ring. Of course, the addition of residue classes has been studied long 
before. For example, in the 1930ies Davenport [3] and Chowla [2] gave bounds on the 
size of the sumset of any two sets of residue classes with applications to Waring's problem. 
In what follows, we restrict ourselves to special sets of residue classes. The benefit is that we 
gain a very precise understanding of the resulting sumset structure. The setting has been 
inspired by a problem in graph theory (see Section [6]), but it turns out to be an interesting 
object of study on its own. 

Given a finite abelian group G and an element a G G, define the atom of a as 

atom(a) := {a' G G : (a) = (a)}. 

In other words, atom(a) is the set of all generators of (a). Clearly, the atoms of any two 
elements of G are either disjoint or identical. The term "atom" originates from the theory 
of Boolean algebras where it denotes the second minimal elements of a lattice. In this case 
it refers to the Boolean algebra generated by the subgroups of G. It is not difficult to see 
that every element of this Boolean algebra is a disjoint union of atoms. 

Recently Klotz and the second author proved the following result in [TJ: 
Let G be a finite abelian group with a,b G G. Then atom(a) + atom(6) is the (disjoint) union 
of atoms of G. 

In this article we extend the result of Klotz and T. Sander [7] in the case where G is 
a cyclic group. It turns out that in this situation the above phenomenon can be explained 
much more explicitly. In particular we shall see the union of which atoms make up the sum 
of two given atoms (cf. Theorem 13.21) . Along the way (cf. Theorem 13.11) we shall determine 
the number of representations of each element in atom(a) + atom(fe), which substantially 
generalizes the formula for the counting function N n (c) in (pD) obtained by J.W. SANDER 

0. 
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2 Terminology and the Reduction Lemma 



Up to isomorphism there is exactly one cyclic group of order n for each positive integer n, 
and a standard model is the residue class group Z n with respect to addition mod n. We use 
this model, because in our context it is profitable to consider Z n as a ring, also equipped 
with multiplication mod n, which turns Z n into a principal ideal domain. 

If we denote by R* the set of all units in a ring R with 1, then R* is a multiplicative 
group and, in particular, Z* = {u 6 Z„ : (u, n) = 1}. From this point of view, the cyclic 
subgroup (a) of the additive group Z n simply is the principal ideal (a) := aZ n generated by 
a in the ring Z n , and atom(a) is exactly the set of all generators of (a), i.e. 

atom(a) = aZ* = {au : 1 < u < n, (u,n) — 1}. (2) 

Usually the set on the righthand side of d2J) provides multiple representations of the elements 
of atom(a). For that reason, we shall prefer the alternative 

atom(a) = (a)* := {ax : 1 < x < ord(a), (x,ord(a)) = 1}, (3) 

where ord(a) = denotes the order of a in the additive group Z n , and then by ([3]) each 
element of atom(a) is uniquely represented. A proof for the identity aZ* = (a)* as well as 
the uniqueness of the representation in ([3]) is given in Corollary 14.11 below. We like to draw 
the reader's attention to the two different types of asterisks we use. While R* denotes the 
unit group in a ring R with 1, we have 1 ^ (a) for (a, n) > 1, and in this case (a)* is not 
the set of units in the ideal (a). However, all x G (a)* are of type (a,n) ■ u for some unit 
u G Z*. Observe that our notation includes the definition of I* for the zero ideal, namely 
{0}* = {0}. 

The theorem of KLOTZ and T. SANDER [7] now reads: 
Let I and J be two ideals in the residue class ring Z„. Then I* + J* is the (disjoint) union 
of atoms in Z n; i.e. there are ideals Ii, ■ ■ ■ , Ik Q Z n; say, such that 

k 

T* + J*=\J If- (4) 

It is our main goal to determine I\,...,Ik explicitly in terms of / and J. 

In order to simplify matters we take advantage of the natural order in the set of (positive) 
integers. Any ideal / in the ring Z n is principal, hence there is some a G Z n satisfying (a) = /. 
The generating element a is uniquely determined if we require a to be represented by the 
least non-negative residue mod n among all generators of /. This minimal generator a of I 
will be called the leader lead(J) of /. Clearly, lead(J) | n and ord(lead(/)) = j^^jy for any 
ideal I C Z n . Moreover, we have by (J3j) 

I* = {lead(I) • x : 1 < x < ^ , (x, ^) = l}, (5) 

hence |/*| = (p{^^). 

Given two ideals I and J in Z n , we first identify those c G Z n lying in /* + J* and 
determine for each such c the number of representations. Finally, we deduce the desired 
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decomposition fll]). Therefore, let a := lead(J) and b := lead (J), hence a \ n and b \ n, and 
define for any c£Z n 

S{c) = S n . a , b (c) := {(u, v) G I* x J* : u + u = c}. 

By fl5J), we obtain 

5 n;a , 6 (c) = {(ax,6y): 1 < x < f , 1 < y < f , (z, *) = (y, f ) = 1, ax + by = c mod n}, (6) 
and 

iV(c) = N n , a , b (c) := #5 n;a , fe (c) = ^ Yl L ( ? ) 

1<!C< 2 l<2/<f 

(*.5)=i (y,?)=i 

ax+by=c mod n 

It will facilitate further considerations if we may assume the leaders of the ideals / and 
J to be coprime. This is justified by the following lemma proved in Section HI 

Lemma 2.1 (Reduction Lemma) Let n be a positive integer with divisors a and b and 
g := (a, 6). For any c G Z n satisfying g \ c, and on setting n' := ^, a' : = |, b' := ^ and 
d :— -, we have: 

9' 

(i) The function 

Pc ■ 

IS 1-1. 

(ii) N n;a>b (c) = N n >. ta t >b >(d). 



(c) -> S n >;a',v(d) 

(ax, by) !->■ (a'x, 6'y) 



Proof of Lemma 12. 11 Since (ii) is an immediate consequence of (i), it suffices to show 
(i). Since g | c, the numbers n', a', b', d are integers. Let (ax, by) G S n;ajb (c), hence 1 < x < ^ 
and 1 < y < t with (x, -) = (y, = 1 by ([B]). Moreover, we have ax + by = c mod n, which 
is equivalent with a'x + &'y = d mod n'. By the fact that 2 = zl anc j 2 — we conclude 
that (a'x,b'y) G S n i. a ' tb i(d), i.e. p c is well defined. It is also obvious that p c is 1 — 1. 

□ 

The Reduction Lemma tells us in case (a, 6) > 1 how to obtain all representations of c in 
Sn;a,b(c) from the representations of d in S n r- a f jb t(d). 

In order to be able to evaluate the double sum (j7|) in a satisfactory manner, we introduce 
some more terminology. For positive integers m and k we define 

<p*{m,k):=m ft (l - £) II f 1 " ^ • 



pGP 



This modified version of Euler's totient function, which for fixed k is multiplicative with 
respect to m, was introduced by the first author in [5] (in slightly different notation). For 
any positive integer m, we denote by rad(m) := ripeP p\mP ^ e so-called radical or squarefree 
kernel of m. 
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3 Main results 



Theorem 13. II below is a generalisation of Theorem 1.1 in [8], where the first author proved 
that 

N n ;i,i(c) = y) G Z* x Z* : x + y = c mod n} = ip*(n, c). 

This is the special case a = b = 1 of the following result. 

Theorem 3.1 Let n be a positive integer with divisors a and b and g := (a, b), and let 

c g Z n . 

(i) If g\c, then N n . a>b (c) = 0. 

(ii) Letg | c and set n' := | ; a' := |, b' := - g andc' := - g . If (c', a'b') > 1, then N n . a>b (c) = 0. 
If (c', a'b') = I, then 

N^= m n (i-i) n K) n H) 

p\m,p\a'b' p\n' ,p\a'b' ,p\d p\n' , p\a' V d \y) 



rn 



■<p(mi) ip(m 2 ) <p*(m 3 ,c'), 



rad(r?V 

where m := -4y and we write rad(m) = m 1 m 2 m 3 with m\ \ a' , m 2 \ b' and (777.3, a 'b') = 
1. 

Corollary 3.1 Let n be a positive integer with divisors a and b, g := (a, 6), and let cgZ n . 
Taen c G (a)* + (6)* z/ and only if the following three conditions are satisfied: 

(i) g I c; (ii) (c',a'b') = 1; (m) n' zs odd or a'b' c' is even, 

where n' : = 2 a' := 2, 6' := 2 and c' := £. 

Corollary 3.2 Let n be a positive integer with divisors a and b, and let I be an ideal in Z n . 
Then N n . a)b {u) = N n . a , b (v) for any u,v G I*. 

Theorem 3.2 Let n be a positive integer with divisors a and b and g := (a,b), and let 

c G Z n . We set n' := 2, a' := 2 and b' := 2. 

n 9 ' 9 9 

(A) If 2 \n! or 2 | a'6' ; we nave 

(%) N n . aib (c) > if and only if g \ c and (c', a'b') = 1 for d :— -. 

(%) J/c^ and N n . a)b (c) > 0, then there is a unique ideal I C Z n / st/cn iaai c' G 7*. 
Moreover, lead(I) = (c',fh 3 ), where m 3 is the largest divisor of -7^7 satisfying 
(777.3, a'b') = 1 . 

(3) (a)* + (6)* = |J g(d)+. 

d\fri3 

(B) If 2 I n' and 2 \ a'b' , we have 
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(1) N n . at b(c) > if and only if g \ c and d := - is an even integer satisfying (c', a'b') = 
1. 

(2) If c ^ and N n . a ^(c) > 0, then there is a unique ideal I C Z n / such that d G I*. 
Moreover, lead(I) = (c',fh 3 ), where m 3 is the largest divisor of satisfying 
(m 3 , a'b') = 1 . 

(3) (a)* + (&)* = |J g(d)\ 

d\m,3, d even 

4 Some technical preliminaries 

As preliminary results to the calculations in the subsequent section, we prove several identi- 
ties, being somewhat charming of their own. Here [i is the Moebius function and we apply 
some of its most basic properties (cf. [5J, chapters 16.3-16.4). 

Lemma 4.1 Let n, d and r be positive integers satisfying (r,d) = 1. Then 

f(n) = f d>r (n) := #{1 < y < n : (dy + r, n) = 1} = n J] M-~ 

p\n, p\d 

In particular, there is always some y such that (dy + r,n) = 1 . 
Proof. We have 

n n n 

I/=l 2/=l ff[n g]n K=l 

(<%+r,n)=l g|(dj/+r) dy+r=0 mod g 

= »E^ E i. 

ff|n y !/=l 

c(y+r=0 mod g 



(9) 



where the inner sum vanishes if (d, g) \ r, and equals (d, g) in case (d, g) \ r. Since (r, d) — 1 
by assumption, (d, g) | r is satisfied if and only if (d,g) = 1, and in this case the inner sum 
equals 1 while it vanishes otherwise. Hence implies 

f d , r (n)=n Y — • 
It follows for coprime integers m and n that 

fd,r{ mn ) =mn ^ 9l9 ^ = fd,r( m )fdA n )> 

(fflS2,<i)=l 
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i.e. for fixed d and r the function fd )T ist multiplicative. For a prime power p s , f is easily 
evaluated by ( TTUil . and we obtain 

(p*\d)=l 

Now the multiplicativity of / completes the proof. 

□ 

We shall now show that (J2J) and (j^J) are both representations of atom(a), and that (j^J) 
yields a unique representation of the elements of (jSJ). 

Corollary 4.1 Let n be a positive integer, and let a G Z n . Tnen atom(a) = (a)*, and eaca 
6 G atom(a) aas a unique representation b = ax with 1 < x < ord(a) ; (x,ord(a)) = 1, hence 
#atom(a) = #(a)* = <£>(ord(a)). 

Proof. Let 6 G aZ* , i.e. b = ax for some x satisfying (x, n) = 1. Since a(x+£-ord(a)) = 
ax + £(a • ord(a)) = ax for each integer i G Z, we may assume that 1 < x < ord(a). Since 
ord(a) | n and (x, n) = 1, we also have (x,ord(a)) = 1, thus b = ax G (a)*. 

Conversely, let b = ax G (a)*, thus (x, ord(a)) = 1. By Lemma [4.11 there is some y such 
that (ord(a) ■ y + x,n) = 1. Since a(ord(a) • y + x) = ax = b, we have 6 G aZ*. Up to now, 
we have shown that atom(a) = (a)*. 

Since ax = ax' with 1 < x < x' < ord(a) = implies x = x' mod t^j, the represen- 
tation in (a)* is unique as desired. Hence #atom(a) = #(a)* = <^(ord(a)). 

□ 



Lemma 4.2 Let m and be positive integers. Then 

i(d) //(e) |/i 

d e ^ 2 A ro V P 



r(m,*)==EE^^ = J # n (i- 2 



d|m e|m 

(d,e)=fc plm.pffc 

m case fc | m ; and T(m, k) = if k \ m. 

Proof. If k \ m, then T(m, k) = is obvious. In the sequel we assume that k | m. Let 
r and s be coprime positive integers, and let u and v be defined according to k = uv such 
that u I r and t> I s. Then 



T{rs,uv)= Yl 



/i(dd') /i(ee') 



dd' ee' 

a'|s e\r, e'\s 
(dd' ,ee')=uv 

\ / \ (11) 

z^L— — 2.2.— — = T(r ' M)T(s ' U) ' 

d|r e|r / \ c('|r e'|s / 

(d,e)=u (d' ,e')=v 

where we have used that (dd', ee') = (d, e)(d', e'). This multiplicativity property of T(m,k) 
reduces the problem to the calculation of T(m, k) for prime powers m = p n and k = p e , say. 
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Since Lemma 14.21 trivially holds for m — k — 1, we may assume n > 1. By definition we 
obtain 



i=0 j=0 
min{i ,j}=£ 



i=0 j=0 y F 



For £ > 2 all summands apparently vanish, hence T(p n ,p e ) = 0. It remains to study the 

cases £ = and £ = 1, where we have T(p n , 1) = 1 and T(p™, p) = \. By f TTT]) . this 

means that T(m, k) = if k is non-squarefree. For squarefree k we finally get 

r<m.*)=n£ n HH n H)- 

p|fc p\ra,p\k p\m,p\k 

□ 

Remark. Lemma I4T21 is complemented by a nice identity for the Moebius function, namely 

/•<*) = EE ^r^. 

d|m e|m 
[d,e]=fc 

for | m, where [d, e] denotes the least common multiple of d and e. This result can be 
shown in exactly the same manner as Lemma [4.21 

Another technical tool is 
Lemma 4.3 Let m and k be positive integers. Then 

TT f, 2 \ <P*{m,k) 



QM :- E m n K) 



d\m pSP 
d\k p\m,p\d 



ni 



Proof. Due to the factor \fi(d)\ the term Q(m,k) depends only on the squarefree 
kernels rad(m) of m and rad(fc) of k, and the same is apparently true for y ( m ' fc ) _ Therefore, 
we may assume without loss of generality that m and k are squarefree. Moreover, any prime 
factors of k which do not divide m are irrelevant. For this reason, we can also assume that 
k I m. Then we have 



d|fe peP 

p|m, pfd 



2 

1 - - 

d|fc \pGP,p|d / \ peP v ■ r/ peP v ^ 

p|fc,pfei p|m,pffc 



e ninf'-i) n (i- 



2 

d|fc \pGP,p|d peP v ■ r/ / \ peP v ^ 

p|fc,pfd p\m,p\k 

2\\ tt ( 2\ <p*(m,k) 



n G+H) n 



pGP v 7 pGP V 7 

p|fc p\m,p\k 
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□ 



5 The number of representations 

Given two ideals / and J in Z n and some c G Z ra , we wish to determine the number of 
representations c = u + v with k G I* and v € J*. By the Reduction Lemma [2.11 we may 
assume that a := lead(J) and b := lead(J) are coprime. 

Proposition 5.1 Let n be a positive integer with coprime divisors a and b, and let c G Z n . 

(%) If (c,ab) > 1, then N n . at b(c) = 0. 

(ii) Let (c,ab) = 1. Then m := ^ is a positive integer, and writing rad(m) = miffl2% 
with mi | cl, m>2 | b and (1713, ab) = 1, we have 

m 

N n . a ,b(c) = —, r (p(mi) (p(m 2 ) ¥*{m 3 , c) 
rad(mj 



m 



n H) n K) n H 



p|m,p|ab p|n,pfafe,p|c p|n,pfa6c 

Proof. 

(i) Since (c, a&) > 1, there is a prime p \ c such that p \ a, say. Then ax + by = c mod n 
can only have a solution x,y if p \ by, which by (a, b) = 1 implies p \ y. But x,y can 
contribute to N(c) in ([7]) only if (y, ?) = 1. It follows that (y, a) = 1, because a | |. This 
contradiction shows that iV(c) = 0. 

(ii) Consider the congruence ax + by = c mod n in (j7|) for some fixed x. Then the 
congruence is only solvable if b = (b,n) | (ax — c), and in this case there exists a unique 
solution y mod am. Hence 

m= E E i= E E i= E E L 

l<x<6m l<y<am l<x<bm l<J/<im l<x<6m l<j/<am 

(x,6m)=l (y,am)=l (x,6m)=l (j,nm)=l (x,bm)=l (j/,am)=l 

ax+by=cmodn by=c-ax mod n &|(as-c) je^ mod am 

The required coprimality condition (y,ma) = 1 is satisfied if and only if (^,mo) = 1, and 
we obtain 

"CO = E i= E E 1= E E 1 

l<a:<ftm 0<t<m l<r<b 0<t<m l<r<b 

(x,bm)=l (bt+r,bm)=l (bt+r,bm)=l 

b\(ax— c) 6|(o(6t+r)— c) ar=c mod b 

(23p,am)=l ( °'"+ r )- c ,am)=l 

= E E f E «m) f E "(e>) 

0<t<m l<r<6 \d|(6t+r,M / V e \( a t+^^.am] J 



ar=c mod b 



E E^E^c) E l 

l<r<6 d|6m e|am 0<t<m 

ar=c mod 6 bt=—r mod d 



at=— ar . c mod e 
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Since = for any non-squarefree integer d, we conclude that 

N ^= E E ^ E E L 

l<r<6 d|b-rad(m) e|a-rad(m) 0<t<m 

ar=c mod b bt=—r mod d 

at =_2^£ mod e 

It follows from (a, 6) = 1 that the three divisors 011,012,013 of rad(m) as defined in the 
statement of the proposition are pairwise coprime, and we obtain 

^( c ) = E E E E a*Wkw s ) E E E a****) E l ( 12 ) 

l<r<b di\m\ d,2\b ds\m-j, e\ \a e2\m,2 e3\m:j 0<t<m 

ar=c mod b bt=—r mod di (i=l,2,3) 



atE-2^mode, (»=1,2,3) 



The congruence system 



bt = —r moddi (i = 1,2,3) 
a t = -np mo d ei (z = 1,2,3) 



(13) 



can have a solution only if each single congruence is solvable, i.e. (di,b) | r, (rf 2 ,&) | r, 
(o?3,6) I r, (ei,a) | ^ tr ^, (^2,0) | ^t- 5 and (e3,a) | 91 f £ - Due to the obvious divisibility 
and coprimality properties of 7711,012,013, four of these six conditions are satisfied per se. 
Only two conditions are necessary for the solvability of (fl3|) . namely g?2 = (d>2,b) \ r and 
ex = (ei,a) | ^^r 15 , which imply b = = r mod g? 2 and a = = mod ei. Therefore, 
the two congruences modc?2 and modei in (1131) trivially hold for every t. All in all, the 
conditions <i 2 | r and e\ | are necessary for the solvability of ([TBI and yield its equivalence 
with the congruence system 



bt = —r modc?i 

bt = —r models 

at = — ^p mode 2 

at = m ode 3 



(14) 



Among the pairwise greatest common divisors of the moduli d\, d 3 , t2, e 3 only (d 3 , e 3 ) may be 
greater than 1. By an extended version of the Chinese remainder theorem (for non-coprime 
moduli) (cf. [BJ, chapter 8), the congruence system (|14p is solvable if and only if ar = 
foar^c moc j ( c j 3) e 3 ) ) i. e . (d 3 ,e 3 ) \ c, and then there exists a unique solution mod <iie 2 [<i 3 , e 3 ] 
with the least common multiple [d 3 , e 3 ] of the moduli <i 3 and e 3 . To sum up, system ( TT3|) is 
solvable if and only if g?2 | r, e± | ^y^, (c? 3 , e 3 ) | c, and under these conditions it has a unique 
solution mod die 2 [<i 3 , e 3 ]. Using this in (fT2|) and applying the identity d 3 e 3 = (d 3 , e 3 )[<i 3 , e 3 ], 
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we obtain 



N(c)= Yl Y M^i)^^) E E ^) 

l<r<b d\\m\ d 2 \b ei\a e2\m,2 

ar=c mod b d 2 |r Cl | " r ~ c 

E Y M4)Me 3 ) ■ 



x 



m 



die 2 [d 3 ,e 3 } 

d 3 \m 3 e 3 \m 3 
(d 3 ,e 3 )\c 

, di|mi / \e 2 |m2 / \d3lm3e3lm3 / 

(d3,e3)|c 



X 



( E Y Pfa) Y V(ei)) 
\ l<r<b d 2 \(b,r) ei |( a) aip) / 

ar=c mod b 



Lemma [4.21 and Lemma [4.31 yield 

E E ^1^^) = Y." E E = E rfI W) 

d3|m3e3|m3 d|c d 3 \m 3 e 3 \m 3 d\c 

(d 3 ,e 3 )\c (d 3 ,e 3 )=d 



e^ n MWk.o (i6) 

<f|c p6P V 7 7 

d|m 3 p|m 3 ,pt<7 

V?*(m 3 ,c) 



m 3 

Assuming r to be a solution of ar = c mod b, it follows from (b, c) = 1 that (6, r) = 1. In 
addition, 1 = (a, c) = (a, ar — c) implies (a, g£ ^- £ ) = 1. Hence 

E E m*) E = E mi)mi) = E 1 = !. ( 17 ) 

l<r<6 d 2 \(b,r) ei|(a, ar ~ c ) l<r<6 l<r<6 

ar=c mod b ar=c mod b ar=c mod f> 

since the congruence has exactly one solution r mod 6. Inserting (I17p and (1161) into (1151) . 
and using a standard identity for the totient function, we obtain 

jV(c) = m = 7 (p(mi)(p(m 2 )<p (m 3 , c) 

mi m2 ?77 3 rad(m) 

-»nH)nH) n H) n K 

p\mi %>\mi p|m3,p|c p\m 3 ,p\c 

The proof of (ii) is completed by the fact that 

p | m i (p | m and p | a), p | 77i 2 <^> (p | m and p | 6), p | m 3 (p \ n and p f ab). 

□ 
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Proof of Theorem I3.1L 

(i) Clearly, g \ a, g | b and g \ n. If g \ c, then ax + by = c mod n has no solution and 
thus N(c) = by ([7]). 

(ii) Since g | c, all numbers n' := ~, a' := |, 6' := ^ and c' := | are integers satisfying 
(a',b') = 1. Hence N n . a7 b(c) = N n i. a ip(d) by Reduction Lemma I2~TT1 (ii). As a consequence 
of Proposition 15.11 (i) it follows that N n - a ^(c) = if (c',a'b') > 1. In case (c',a'b') = 1, the 
identities of (JHJ) follow right away from Proposition 15.11 (ii). 

□ 

Proof of Corollary 13.11 By definition of N n;a>b (c) 7 we have c e (a)* + (&)* if and 
only if N n - a ^(c) > 0. By Theorem I3.1[ the non-vanishing of N n - a> b(c) necessarily requires (i) 
and (ii). Under these two conditions, we have N n . a ^(c) > unless the factor ip*(m 3 ,d) in 
(jBj) vanishes, which means that 2 | m 3 and 2 f d. Hence (f*(m 3 , d) > if and only if 2 \ m 3 
or 2 | c', which in turn is equivalent with (iii). 

□ 

Proof of Corollary 13.21 Let c := lead(J). Then it suffices to show that 

N n ., a , b (c) = N n , a , b (cx) (1<X<% (x,*) = l). (18) 

We set g := (a, b). 
Case 1: g \ c. 

We know from Theorem 13.11 (i) that N n . a ^(c) = 0. Moreover, there is a prime p such that 
p | g, but p \ c. Since p \ n, it follows that p | -, which by (x, -) = 1 implies p \ x. We obtain 
p \ cx, thus (7 f ex. Now Theorem 13.11 (i) tells us that N n - a ^(cx) = = N n . atb (c). 
Case 2: g | c. 

As before, we set n! := -, a' := -, b' := - and d := -. If (c'.a'b') > 1, then (c'x,a'b') > 1, 
and Theorem 13.11 (ii) yields N n . ajb (cx) = = N n .^ b (c). Hence we may assume (c',a'b') = 1. 
The fact that (x, p-) = (x, -) — 1 implies (c'x, a'b') = (x, a'b') = 1 enables us to compare 
N n - a , b {c) and N n;atb (cx) by ([8]). Since m,mi,m2,m 3 as defined in Theorem 13.11 (ii) do not 
depend on c or cx, respectively, ffT8|) would follow from the second identity of OH]) if we can 
prove that (p*(m 3 ,c') = <£>*(m 3 , c'x) for all x satisfying (x, ^) = (x, ^) = 1. Therefore, it 
suffices to show that p | d ^ p \ c'x for all primes p \ m 3 . The direction from left to right 
is trivial. Conversely, we assume that p \ x and have to deduce that p \ d . It follows from 
p | m 3 that p | n'. Since (x, ^) = 1 and p | x, we obtain p f ^r- Together this indeed implies 
that p | c'. 

□ 

Proof of Theorem 13.21 We prove (A) and leave the similar proof of (B) to the 
reader, the main difference being the obvious fact that in case (B) the sumset (a)* + (b)* 
contains only even integers. 

(Al) This is an immediate consequence of Corollary 13.11 by virtue of our condition 2 \ n' 
or 2 | a'b'. 

(A2) By (Al) we have g \ c and (d,a'b') = 1. We set d := (c',m 3 ) and k := ^, hence 
(k, = 1. Observe that ^ 0. We factorise n! = a ! b'mifri2m 3 in such a way that rh\ 
contains only prime factors of a 1 and rfi2 contains only prime factors of b' . Take notice of 
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the fact that (c',a'b') = 1 implies (d, a'&'mim^) = 1. Thus (k,a'b'mim2) = 1, which yields 

(k, ord(d)) = (A, = a'b'm^^f) = (k, =f ) = 1. 

Therefore, d = dk E (d)*, where d = lead(J) for / := (d). Since the uniqueness of I and its 
leader d are clear (cf. introduction on atoms), the proof of (A2) is complete. 
(A3) It suffices to prove 

(a'r + (br = U ( 19 ) 

d\m 3 

since (A3) then follows by Reduction Lemma \2. II (i). First assume that not both integers 
a' and b' are equal to 1. This means that fh 3 ^ n', hence n' is not a divisor of m 3 . Since 
condition (ii) of Corollary 13.11 is violated for c = 0, we know that iV n / ;a / &/(0) = 0. It follows 
from (A2) that 

i {a!)* + (6')* C |J (d)*. (20) 

On the other hand, let d be any divisor of and (k, = 1, i.e. cf/c is an arbitrary 
element of the union on the righthand side of f[2"Uj) . In order to complete the proof of (fTS]) it 
suffices to show that N n i. a i^i(dk) > 0, which by (Al) requires (dk, a'b') = 1. Since d \ rh 3 , we 
have (d, a'b') = 1 by definition, and thus a'b' \ ^. Since (k, *j) = 1, we also have (k, a'b') = 1. 

We are left with the special case a' = b' = 1, when AV;i,i(c') > for all d by Corollary 
13.11 Clearly, fh 3 = n', hence by the above argument and {0} = {0}*, 

ogz;, + z;, c{o}u (J (d)* = \J(d)*. 

d\n' , dj^n' d\n' 

The converse inclusion follows trivially from the fact that A^ n / ;ljl (c') > for all d, i.e. Z*, + 
Z*, = Z n /. Therefore, (Till holds in all cases. 

□ 

6 Application to Cayley graphs 

Besides the fact that adding multiplicatively defined objects is a particularly interesting 
study subject for number theorists, we now present an application in graph theory. Cayley 
graphs model certain algebraic properties of groups in terms of adjacency of vertices in 
graphs. Given a finite additive group G and a subset S ^ with — S = S, we define the 
Cayley graph Cay(G, S) as follows. The vertices are identified with the elements of G. Two 
vertices x,y G G are adjacent if and only if x — y G S. The set S is called the symbol of 
the Cayley graph Cay(G, S). In order to avoid loops, one usually requires 0^5. If G is a 
cyclic group Z n , then we obtain the important subclass of circulant graphs (their adjacency 
matrices being circulant matrices). 

Among these graphs there are those with integer eigenvalues (of their respective adjacency 
matrices), called the integral circulant graphs. According to [9], these can be characterized 
as follows. Let Z n = {0, . . . , n — 1} be the set of vertices and choose a subset D of the positive 
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divisors of n. With each divisor d of n we associate a set S n (d) = {x G Z n : (x, n) = d}. Set- 
ting S(D) = UdgD Sn(d), we obtain the integral circulant graph ICG(n, D) : = Cay(Z n , S(D)) 
with n vertices and divisor set D. 

Obviously, the sets S n (d) are nothing but the atoms of Z„. Hence 



Since this is an actual characterization of integral circulant graphs, we see that integrality of 
Cayley graphs over Z n can be determined by whether their symbol sets can be partitioned 
into complete sets of atoms. It is worth noting that this view even extends to integral Cayley 
graphs over finite abelian groups in general PQ. 

Due to the property of ICG(n, D) being a circulant graph, the neighbourhood of every 
vertex looks basically the same (except for a translation), just note that x — y G S if and only 
if (x + s) — (y + s) G S. So if we want to explore the neighbourhoods of the vertices of some 
graph lCG(n, D), we can restrict ourselves to vertex 0. Clearly, the neighbours of vertex 
are given by the set S(D). In order to explore the neighbourhood of the neighbourhood of 
vertex 0, we need to form the set S(D) + S(D). This is because in a Cayley graph the act of 
moving from some vertex to one of its neighbours is the same as adding some element from 
its symbol set. 

Since S(D) is a disjoint union of atoms, we just need to determine all sumsets of pairs 
of those atoms. By Theorem 13.21 we know that these sumsets are again disjoint unions of 
atoms. This gives us some interesting information on how vertices are visited when explor- 
ing an integral circulant graph. Not only does the neighbourhood of some neighbourhood 
decompose into complete atoms, but we can also tell how often the vertices of each atom get 
discovered. 

Forming the overall union of the atoms that make up the neighbourhood of the neigh- 
bourhood of vertex 0, we effectively determine all vertices in ICG(n, D) whose distance from 
vertex is at most two. Filtering out the vertex at distance level (corresponding to the 
atom (0)* and the neighbourhood of vertex at distance level 1, the remaining atoms form 
the distance level 2. We can continue this exploration process until we have discovered every 
single vertex of the graph (in which case the distance level equals the diameter of the graph). 

Recording the adjacencies of vertex with the vertices of one or more distance levels and 
extending this into a circulant adjacency matrix, we obtain a generalized distance matrix 
of the graph ICG(n, D). By construction, each such matrix represents an integral circulant 
graph for some particular divisor set and the divisor sets of all distance level graphs form 
a partition of the divisor set of n. Choosing the consecutive distances l,...,r for some 
1 < r < n, we obtain the so-called distance powers of ICG(n, D). 

As an example, consider the graph 



ICG(n,L>) = Cay(Z n , £(£>)) = Cay(Z n , |J atom(d)) = Cay(Z n , |J (<*)*)■ 




r := ICG(60, {3, 10}) = Cay(Z 60 , atom(3) U atom(10)). 



We shall determine the divisor set of its second distance power 



r( 2 ) = Cay Z, 
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Let us evaluate the involved atom sums: 

(3)* + (3)*= |J 3(d)* = S 60 ({0,6,12,30}), 

2\d,d\20 

(3)* + (10)* = |J (d)* = S 60 ({l», 

d\i 

(10)* + (10)*= |J 10(d)* = S , 60 ({0, 20}). 

2|d,d|6 

Hence it follows that 

r^ 2 ) = ICG(60,{1,6,12,20,30}). 

Noting the atom leaders of the respective distance levels, we additionally obtain the infor- 
mation that during the exploration process of the distance levels, none of the atom vertex 
sets has been explored more than once, with exception of {0} = atom(0): 

Level 0: 

Level 1: 3, 9, 21, 27, 33, 39, 51, 57, 10, 50 

atom(3) atom(10) 

Level 2: 0, 1, 7, 11, 13, 17, 19, 23, 29, 31, 37, 41, 43, 47, 49, 53, 59, 6, 18, 42, 54, 

atom(l) atom(6) 

12,24 , 36,48 , 20,40, 30 

atom(12) atom(20) atom(30) 
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